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Top Stories 

• An April 16 explosion at MagnaGas in Tarpon Springs, Florida, killed one worker, left 
several others injured, forced an evacuation of the building, and prompted the shut off of 
the facility’s propane machine. - WTVT 13 Tampa (See item 2) 

• The Wyoming Highway Patrol closed a 150-mile section of Interstate 80 between 
Cheyenne and Rawlins April 16 due to 3 separate pileups involving over 60 vehicles 
caused by recent heavy snows. - Associated Press; K1FI 8 Idaho Falls (See item 12) 

• Northbound Interstate 5 near the Interstate 405 exit in Washington was closed for several 
hours April 7 while crews worked to clear debris and recover bees that were released when 
a semi-truck carrying 485 beehives overturned. - MyNorthwest.com (See item 13) 

• Security researchers at Trend Micro reported that cybercriminals are concentrating attacks 
on U.S. personnel from the North Atlantic Treaty Organization (NATO) and the White 
House as part of the ongoing Pawn Storm cyber-espionage operation. - Help Net Security 
(See item 24) 
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Energy Sector 



1. April 17, Associated Press - (West Virginia) W.Va. regulators require more 
disclosure at coal prep plants. The West Virginia Department of Environmental 
Protection issued an order to approximately 90 coal preparation plants across the State 
to disclose potential pollutants that could be dumped into a waterway within 60 days, 
and make permit modifications with the updates within 90 days. Officials stated that 
the order aims to better protect the State’s streams. 

Source: http://www.wchstv.com/template/inews wire/wires .regional. wv/3c2flfa4- 
www. wchstv.com. shtml 

2. April 16, WTVT 13 Tampa - (Florida) One killed, multiple injuries in Tarpon 
Springs explosion. An April 16 explosion at MagnaGas in Tarpon Springs, Florida, 
killed one worker, left several other employees injured, forced an evacuation of the 
building, and prompted the shut off of the propane machine. Authorities are 
investigating the cause of the explosion. 

Source: http://www.mvfoxtampabav.com/storv/28822568/crews-on-scene-of-tarpon- 
springs-explosion 

3. April 16, WDAM 7 Laurel - (Mississippi) Covington County oil spill stretches two 
miles down the creek. A Mississippi Resources Fimited-owned oil well was breached 
April 16, spilling approximately 100 barrels of oil into a 2-mile stretch of Oakey 
Woods Creek in Covington County. The oil well was shut off and crews deployed 
booms in the creek to help clean up the spill. 

Source: http://www.myfoxal.com/story/28821215/covington-county-oil-spill-stretches- 
two-miles-down-creek 

T Return to top i 

Chemical Industry Sector 

Nothing to report 



[ Return to top ] 

Nuclear Reactors, Materials, and Waste Sector 

4. April 16, Associated Press - (New Mexico) Investigators: Radiation release at 
nuclear waste dump could have been prevented. The U S. Department of Energy’s 
Accident Investigation Board released findings April 16 identifying numerous failures 
that led to the 2014 radiation release at the Waste Isolation Pilot Plant (WIPP) in 
Carlsbad, New Mexico, including the Eos Alamos National Faboratory lacking an 
adequate system to identify and control hazards, and a poorly instituted safety culture at 
the WIPP, among other findings. The WIPP was closed indefinitely as a result of the 
leak. 

Source: 

http://www.greenfieldreporter.eom/view/story/a442d7ff68354a5f943e8968788eaa82/U 
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S— Nuke-Repository- Investigation 



5. April 16, Associated Press - (Idaho) Nuclear officials report minor accident in 
eastern Idaho. An official from the Idaho Cleanup Project reported April 8 to a 
federally appointed citizens’ panel that a problem with the ventilation system caused 
radioactive contamination to spread throughout the Idaho National Laboratory facility 
in October 2014, prompting an evacuation and exposing a worker to low levels of 
radiation. The facility was decontaminated for 7 weeks before operations fully 
resumed. 

Source: http://www.kboi2.com/news/local/Nuclear-officials-report-minor-accident-in- 
eastern-Idaho-3002 18571 .html 

[ Return to top ] 

Critical Manufacturing Sector 

6. April 16, Associated Press - (National) Nissan expands air bag recall after 
Louisiana injury. Nissan Motor Co. Ltd. expanded an existing recall April 16 to 
include 45,000 model years 2004-2006 Sentra vehicles due to an issue with Takata 
Corp., passenger- side air bags that could cause them to explode and spew metal 
shrapnel into drivers and passengers. The recall announcement was issued after an air 
bag exploded in a 2006 Nissan Sentra exploded in March, causing injuries to the driver. 
Source: http://abcnews.go.com/Business/wireStory/nissan-expands-air-bag-recall- 
louisiana-injury-30375580 

7. April 16, Automotive News - (National) Volkswagen extends Routan ignition-switch 
recalls. Volkswagen Group of America issued an extension of a previous recall to 
include 20,676 model years 2009 and 2010 Routan minivans due to an ignition switch 
issue that could cause inadvertent ignition key displacement from the run position that 
would shut off the engine and power down safety systems including power steering and 
braking. No accidents or injuries have been reported as a result of the issue. 

Source: http://www.autonews.com/article/20150416/QEMl 1/1 5041 9905/volkswagen- 
extends-routan-ignition-switch-recalls 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

8. April 16, USA Today - (National) Ex-JPMorgan adviser charged in $20M fraud. A 
former JPMorgan Chase investment adviser was arrested and charged April 16 for 
allegedly stealing $20 million from at least 7 customers between 2011-2015 by 
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withdrawing funds from client accounts and convincing others to invest large sums in 
supposed low-risk municipal bonds in a JPMorgan account, which he instead used to 
obtain cashier’s checks that he deposited in brokerage accounts that he and his wife 
held and used for personal expenses. The adviser allegedly gave clients fraudulent 
account statements and shifted funds between accounts to avoid discovery. 

Source: http://www.usatodav.com/storv/monev/business/2015/04/16/ipmorgan- 
investment-adviser- fraud/25 89 1775/ 



9. April 16, U.S. Securities and Exchange Commission - (National) SEC charges 10 
individuals in scheme to sell stock in blank check companies secretly bound for 
reverse mergers. The U.S. Securities and Exchange Commission charged 10 
individuals April 16 for their roles in a scheme in which they allegedly collected about 
$6 million through penny stocks offered via undisclosed “blank” check companies 
bound for reverse mergers which they misrepresented to the public as startups with 
false business plans. 

Source: http ://www . sec . gov/news/pressrelease/20 1 5-69 .html 
For additional stories, see items 22 and 30 
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Transportation Systems Sector 

10. April 17, WSVN 7 Miami- (Florida) 2 dead after tractor-trailer accident on 

Sawgrass Expressway. The northbound lanes of the Sawgrass Expressway in Sunrise, 
Florida, reopened April 16 after being closed for approximately 5 hours while crews 
responded to an accident involving a semi-truck that killed 2 people and left 1 person in 
serious condition. Officials are investigating the cause of the crash. 

Source: http://www.wsvn.com/storv/28820159/sawgrass-expresswav-shut-down-after- 
tractor- trailer- accident 



11. April 16, Texarkana Today - (Texas) Flight en route to Cincinnati makes emergency 
landing in Texarkana. An American Eagle flight en route from Dallas to 
Cincinnati/Northem Kentucky International Airport made an emergency landing in 
Texarkana after the pilot reported that the plane’s flight controls were shaking badly 
April 16. The plane landed safely and the cause of the flight control issue has not been 
determined. 

Source: http://txktodav.com/news/flight-en-route-to-cincinnati-makes-emergency- 
landing-in-texarkana/ 

12. April 16, Associated Press; K1F1 8 Idaho Falls - (Wyoming) Heavy snow, numerous 
accidents close 1-80 in SE Wyoming. The Wyoming Highway Patrol closed a 150- 
mile section of Interstate 80 between Cheyenne and Rawlins April 16 due to 3 separate 
pileups involving over 60 vehicles caused by recent heavy snows. Officials were unsure 
when the interstate will open again. 
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Source: http://www.localnews8.com/news/heavy-snow-numerous-accidents-close-i80- 
in-se-wyoming/32407872 



For another story, see item 13 
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Food and Agriculture Sector 

13. April 17, MyNorthwest.com - (Washington) Semi-truck carrying bees tips on 1-5 
near Lynnwood. Northbound Interstate 5 near the Interstate 405 exit in Lynnwood was 
closed for several hours April 17 while beekeepers and crews worked to clear debris 
and control swarming bees that were released when a semi-truck carrying 485 beehives 
overturned and spilled its load. The driver was not hurt but most of the 14 million bees 
were killed in the crash. 

Source: http://mvnorthwest.eom/l l/2748952/Semitruck-carrving-bees-tips-on-I5-near- 
Lynnwood 

14. April 17, U.S. Food and Drug Administration - (National) Schnucks recalls Chef’s 
Express California Pasta Salad because of possible health risk. The U.S. Food and 
Drug Administration reported April 16 that Schnuck Markets, Inc., issued a recall for 
its Chef’s Express California Pasta Salad due to possible Salmonella contamination. 

The recalled product was distributed to 99 Schnucks locations across several States and 
sold by weight through the stores’ Deli/Chef’s Express departments from April 2-14. 
Source: http://www.fda.gov/Safety/Recalls/ucm443343.htm 

15. April 16, WITI 6 Milwaukee - (Wisconsin) Three cases in Wisconsin: Bird flu now 
detected in poultry flocks in Juneau, Barron counties. Authorities confirmed April 
16 the presence of the H5 avian influenza virus in a 126,000 turkeys in a commercial 
turkey flock in Barron County and in 40 mixed breed birds in a backyard flock in 
Juneau County, prompting the immediate quarantine of the properties. The birds will be 
culled as a precaution and will not enter the food supply. 

Source: http ://fox6no w .com/20 1 5/04/ 1 6/three-cases-in- wisconsin-bird-flu-no w- 
detected-in-poultry-flocks-in-juneau-barron-counties/ 

16. April 16, Vancouver Columbian - (Washington) Yacolt farm voluntarily recalls raw 
milk, cream in listeria scare. Spanish Sonrise Dairy of Yacolt, Washington, 
voluntarily recalled its raw cow milk, goat milk, and cream products with expiration 
dates between April 16-21 after routine sampling by the Washington State 
Department of Agriculture revealed Listeria monocytogenes contamination. The 
recalled products were sold in Washington. 

Source: http://www.columbian.com/news/2015/apr/15/raw-milk-recall-yacolt-spanish- 
sonrise-farm/ 

17. April 16, Food Safety News - (National) Pine nuts recalled for possible Salmonella 
contamination. Hannaford Supermarkets and Superior Nuts & Candy announced April 
16 a recall for certain 4-ounce packages of pine nuts due to possible Salmonella 
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contamination. The recalled product was sold exclusively in Hannaford stores’ produce 
departments. 

Source: http://www.foodsafetvnews.com/2015/Q4/pine-nuts-recalled-for-possible- 
salmonella-contamination 
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Water and Wastewater Systems Sector 



See item 3 
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Healthcare and Public Health Sector 

18. April 15, WPV1 6 Philadelphia - (Pennsylvania) Doctor forged prescriptions for his 
wife and others, Chester Co. D.A. says. An oral surgeon and managing partner at 
Absolute Oral Surgery, P.C. in Berwyn admitted to writing medically unnecessary 
prescriptions for pain pills for his wife, office manager, and his office manager’s 
daughter after investigators found that the individuals were filling the prescriptions and 
turning them over to his wife, who is a sedation nurse for the practice. Authorities 
determined that the couple would steal fentanyl and replace it with a saline solution in 
order to evade detection. 

Source: http://6abc.com/news/da-doctor-forged-prescriptions-for-his-wife/661565/ 
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Government Facilities Sector 

19. April 17, Associated Press - (North Carolina) Days after killing, bomb threat closes 
community college. School officials announced the closure and the cancelation of 
classes at Wayne Community College in North Carolina April 17-April 19 due to a 
phoned bomb threat. 

Source: http://www.wral.com/davs-after-killing-bomb-threat-closes-community- 
college/14588708/ 

20. April 17, West Central Tribune - (Minnesota) Firefighters continue battling 
‘Palsburg Fire’ in Beltrami Island State Forest. Crews reached 30 percent 
containment April 16 of the Palsburg Wildfire that burned through 4,700 acres of 
timber in Minnesota’s Hayes Lake State Park in Beltrami Island State Forest. 

Source: http://www.wctrib.com/news/state/3724805-firefighters-continue-battling- 
palsburg-fire-beltr ami-island-state-forest 

21 .April 16, UpNorthLive.com - (Michigan) Cheboygan Area Schools close for second 
day after gas main break. An April 15 gas leak caused by a student that hit a 4-inch 
gas main prompted the closure of Cheboygan Area Schools in Michigan April 16- April 
17 due to the schools remaining without hot water or heat. 
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Source: http://www.upnorthlive.com/news/storv.aspx7idM192214 



22. April 16, Associated Press - (Washington) State auditor indicted, accused of $2 
million scheme. The State auditor for Washington was charged April 16 for filing false 
tax returns, attempted obstruction of a civil lawsuit, and possession of more than $1 
million in stolen property related to a former business after Federal prosecutors 
reported that the elected official kept over $1 million in refunds belonging to customers 
of mortgage title services companies who worked with his company, Post Closing 
Department. 

Source: http://www.komonews.com/news/local/State-auditor-indicted-on-suspicion-of- 
hiding-millions-in-stolen-monev-300 116831 .htrnl 

23. April 15, KTXS 12 Sweetwater - (Texas) Some Taylor County offices closed 
Wednesday due to power outage. An April 15 power outage prompted the closure of 
the Taylor County Plaza Building in Texas, which houses offices for tax assessor/auto 
registration, elections, environmental and veteran’s services. Crews worked to restore 
power. 

Source: http://www.ktxs.com/news/some-taylor-countv-offices-temporarily-closed- 
due-to-power-outagel/32379622 

For another story, see item 24 
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Emergency Services Sector 

Nothing to report 
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Information Technology Sector 

24. April 17, Help Net Security - (International) Pawn Storm cyberspies still at work, 
target NATO and the White House. Security researchers at Trend Micro reported that 
cybercriminals are concentrating attacks in the Pawn Storm cyber-espionage operation 
on the North Atlantic Treaty Organization (NATO) and White House personnel in the 
U.S., in addition to government and military officials and media companies. The 
attacks seek to compromise targets’ computers and Microsoft Outlook accounts via 
spear-phishing emails and compromised Web sites that deliver the SEDNIT/Sofacy 
trojan malware. 

Source: http://www.net-security.org/secworld.php7idM8233 

25. April 17, Softpedia - (International) Flash Player bug allows video, audio recording 
without user consent. A security researcher from Klikki Oy discovered a vulnerability 
in versions of Adobe Flash Player prior to 17.0.0.169 in which an information 
disclosure could be leveraged to deliver audio and/or video streams captured on 
victims’ devices to remote locations controlled by attackers. The flaw is connected to 
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another double-free vulnerability that could allow an attacker to execute arbitrary code 
on the affected system. 

Source: http://news.softpedia.com/news/Flash-Plaver-Bug-Allows-Video-Audio- 
Recordin g- Without-User-Consent-47 8664. shtml 

26. April 17, Help Net Security - (International) 1 in 4 employees enable cloud attacks. 
CloudLock released research from a study of over 750 million files, 77,500 apps, and 6 
million users in the cloud that concludes nearly 1 in 4 employees violate corporate data 
security policy in public cloud applications, culminating in an average of 4,000 
instances of exposed credentials in each organization, among other findings. 

Source: http://www.net-securitv.org/secworld.php ?id=l 8232 

27. April 16, Securityweek - (International) Users warned of serious flaw in deprecated 
Cisco Secure Desktop feature. Cisco released a security advisory warning of a high 
severity command execution vulnerability affecting Cisco-signed Java Archive (JAR) 
executables in Cache Cleaner for Cisco Secure Desktop that could allow an 
unauthenticated attacker to run arbitrary commands on affected systems. The company 
deprecated the Cache Cleaner product over 2 years ago and advised users to transition 
to the Cisco Host Scan standalone package. 

Source: http://www.securitvweek.com/users-warned-serious-flaw-deprecated-cisco- 
secure-desktop-feature 

28. April 16, Securityweek - (International) D-Link failed to patch HNAP flaws in 
routers: Researcher. D-Link published security advisories for multiple router models 
that identify vulnerabilities related to the Home Network Administration Protocol 
(HNAP) that could allow unauthenticated attackers to inject commands through HNAP 
requests, leverage flaws to gain access to information on hosts connected to the 
network, change system settings, and reset the devices to factory settings. D-Link is 
working on fixing the flaws through additional firmware updates. 

Source: http://www.securitvweek.com/d-link-failed-patch-hnap-flaws-routers- 
researcher 

29. April 16, SC Magazine - (International) PCI SSC releases version 3.1, eschews SSL, 
early TLS. The Payment Card Industry Security Standards Council (PCI SSC) 
announced in its release of PCI Data Security Standard (PCI DSS) Version 3.1 that 
secure- sockets layer (SSL) support would be discontinued in favor of current transport 
layer security (TLS) encryption, due to weaknesses that were identified in SSL by the 
National Institute of Standards and Technology that could put payment data at risk. The 
change also occurred as a result of previous Web browser attacks that took advantage 
of SSL vulnerabilities such as POODLE and BEAST. 

Source: http://www.scmagazine.com/orgs-have-14-months-to-move-to-pci-ssc-version- 
3 l/article/409549/ 



30. April 16, SC Magazine - (International) POS threat ‘Pun key’ allows additional 
malware download for greater access. An investigation by the U.S. Secret Service 
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and Trustwave researchers discovered a new point-of-sale (POS) malware threat 
resembling NewPosThings that utilizes advanced encryption standard (AES) 
encryption with an embedded key, and has the capability to download additional 
malware on affected systems. Authorities revealed that up to 75 unique POS terminals 
may be infected with the malware. 

Source: http://www.scmagazine.com/investigation-uncovers-new-pos-malware- 
punkey/article/4095 5 9/ 

31. April 16, ZDNet- (International) IBM’s X-Force Exchange to make decades worth 
of cyber-threat data public. IBM announced that that it will release a raw cyber-threat 
database of over 700 terabytes to cyber-threat data and intelligence companies, as well 
as malware threat data from 270 million computers and devices, 25 billion Web pages 
and images, and spam and phishing attack emails in an initiative called X-Force 
Exchange, which seeks to help companies mobilize against ongoing threats. 

Source: http://www.zdnet.com/article/ibm-opens-up-decades-worth-of-threat-data-to- 
combat-cybercrime/ 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

See item 24 



T Return to topi 



Commercial Facilities Sector 

32. April 17, WVIT 30 New Britain - (Connecticut) 70 displaced after Hartford fire. At 
least 70 residents were displaced from a Hartford apartment building April 16 
following a 3-alarm fire that tore through the building and injured 1 firefighter. The 
building where the fire started was deemed a total loss and ruled uninhabitable, while 
an adjacent structure that was damaged by the blaze may open again in the future. 
Source: http://www.nbcconnecticut.com/news/local/Hartford-Residential-Building- 
Evacuated-During-Fire-30020499 1 .html 

33. April 17, Los Angeles Daily News - (California) 1 resident, 2 firefighters injured; 30 
displaced in Panorama City apartment fire. An April 17 fire displaced 30 residents 
from a Panorama City apartment building. One resident and one firefighter were 
injured during the blaze. 

Source: http://www.dailynews.com/general-news/20150417/l-resident-2-firefighters- 
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iniured-30-displaced-in-panorama-city-apartment-fire 



34. April 17, Fort Lauderdale Sun-Sentinel - (Florida) 8 hurt when man, 85, drives SUV 
into Fort Lauderdale dry cleaning store. Eight individuals were transported to area 
hospitals after a driver lost control of his vehicle and crashed into the DryClean USA 
store in Fort Lauderdale April 17. Nearby businesses in the shopping plaza were 
temporarily evacuated and closed while crews contained gas and water leaks that 
resulted from the incident. 

Source: http://www.sun-sentinel.com/local/broward/fort-lauderdale/fl-lauderdale-car- 
into-business-20150417-story.html 

35. April 16, WAVE 3 Louisville - (Indiana) 80 people out of homes after Jeffersonville 
apartment fire. Two buildings at the Bridgeport Apartments complex in Jeffersonville, 
Indiana, were rendered uninhabitable by an April 16 fire that damaged 48 units and 
displaced about 80 residents. The cause of the fire remains under investigation. 

Source: http://www.wave3.com/storv/28822995/apartment-fire-in-ieffersonville 

36. April 16, Atlanta Journal-Constitution - (Georgia) Large business fire burning in 
Clayton County. A 2-alarm fire broke out at a commercial strip center in Clayton 
County and damaged at least 3 businesses April 16. No injuries were reported in the 
fire that remains under investigation. 

Source: http://www.aic.com/news/news/large-business-fire-buming-in-clayton- 
county/nkwxH/ 

For additional stories, see items 29 and 30 
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Dams Sector 

Nothing to report 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 
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